Job Description

ABOUT GELATO

Gelato has the worlds largest platform for producing personalized items across the planet. We strive to give everyone the opportunity to build a global business and share their creativity in a smarter, faster, and greener way. Our network of printers, logistics, and payment partners in 30 countries allows online stores - from startups to enterprises - to produce and deliver products anywhere in the world within 72 hours.

We are a customer-obsessed team with the ambition to change the world by connecting technology to the printing industry and making it much more sustainable. We are looking for team members who are truly passionate about their work and who possess an entrepreneurial spirit. We have a strong culture, and everyone who joins our team must feel genuinely intrigued and motivated by our mission.

POSITION SUMMARY

Following our global expansion, we are looking for a passionate Information Security Engineer to join our effort of protecting Gelato and, most importantly, our customer's data.

We are looking for people who want to make the Gelato platform safer for millions of users around the world. Wed love to talk to you if youre a talented individual who is passionate about finding security weaknesses and crafting scalable and usable solutions. We are enablers who make it easier for engineers to create secure features, not blockers. This is a generalist role.

Reporting directly to VP Information Security, you will work closely with Product Managers and Tech Engineers.

WHAT YOU WILL BE DOING

• Partner with Product Design and Software Engineering on security feature roadmaps, and assure these are delivered on time
• Identify unaddressed areas of weakness and drive cleverly engineered, scalable solutions that improve our defense-in-depth.
• Helping engineers design more secure systems via design input and code review.
• Evangelize security to ensure every Gelato employee stays informed of security best practices.
• Define and refine measurements of security risk.
• Ensure DR&BC plans and solutions are in place and kept up-to-date

WHO YOU ARE

To be successful in this role you will need to have a start-up mentality. You are committed to excel with energy and endurance while you understand that building a company is very hard but that is what you want to achieve. You have superior communication skills, excellent interpersonal skills, high integrity, and great attention to detail. You are a natural and comfortable leader, have excellent problem-solving, organizational, and analytical skills. You are interested in keeping up with current best practices in your areas of expertise. You are a self-starter with the ability to excel with little to no direction. You are naturally curious. You have the ability to think creatively and holistically about reducing risk in a complex environment.

You will probably have a background in network administration, DevSecOps or worked as a programmer in the past. On top of this, you spent 3 or more years on a role focusing on Information Security, having performed security administration such as account management and/or firewall implementation, managing IDS/IPS, implementation of SIEM solutions and so forth, ethical hacking, or forensics and security investigations.

Moreover, we would like to see evidence of the following in your profile:

• A degree (Masters is a plus) in Computer Science, similar technical field of study or equivalent practical experience
• 3+ years experience in security engineering, or a related discipline.
• Good understanding of implementation requirements for ISO27001 an/or SOC-2
• Experience designing and implementing production services, APIs, or security-specific libraries.
• Experience with cloud solutions such as AWS and GCP
• Great thinking, planning, and organizational ability.
• Fluent in English with strong verbal and written communication skills.
• Hands-on certifications (such as OS*, CREST, etc) are considered plus

WHAT WE OFFER

We offer the rare opportunity to change the world such that everyone around you can use the services youve been part of building. Were not just another social web application; were improving one of the worlds largest industries.

We offer you a chance to be part of a truly amazing journey in a company that sets very high targets and works hard to achieve them. You will be able to work with smart, motivated, and engaged co-workers from all over the world, in an intense and very energetic environment.

You will have a tangible impact on the way that we operate and expand our business. Working with some of the most ambitious colleagues out there you will have a ground floor opportunity to put all your experience and know-how to the test while learning at a speed you thought was impossible before joining.

As we continue to grow we want you to grow with us and for the right candidate, there is no limit to where this opportunity might take you.

WHAT ITS LIKE TO WORK AT GELATO

We expect a lot. We are a driven team with big goals, so we seek individuals who are genuinely passionate about their work and possess an entrepreneurial spirit. Our culture is unique and we live by our values, so it's worth learning more about Gelato and our values on our website.

We recommend you submit your application as soon as possible as selection and interviews are held continually.

REQUIREMENTS

All candidates must have the legal right to work in the designated country and will be expected to provide documentation to support this status. Unfortunately, we are unable to sponsor visa or relocation at this time.

If you have any questions you can contact us: careers@gelato.com